When companies lose control of personal data, who is accountable for the harm that comes years later?

A point-of-view article by Chirag Dani.
A deeper exploration of customer accountability, autonomous systems and the next generation of cyber regulation.
When a large organisation is attacked and customer information is stolen, we usually discuss three things:
How did the attacker get in? ; How much data was stolen? ; How much will the organisation be fined?
I think we are asking the wrong final question.
The question I increasingly want boards, regulators, technology leaders and legislators to answer is: Who carries the risk after the organisation has lost control of my identity?
The Identity Is the New Perimeter: Why Privileged Access Has Become an Enterprise-Level Risk

No firewall was defeated. No zero-day was burned. No sophisticated exploit was developed. A telephone call was made, and the attackers became authorised users.
I return to that pattern constantly in conversations with banking, government, telco and utility clients because it is not an exceptional case. It is now the median case. Verizon’s most recent Data Breach Investigations Report attributes roughly two-thirds of all breaches to a human element, with stolen credentials the single most common initial-access vector across most industries. The attacker does not need to break through your firewall if they can convince your systems that they are you.
A Modern Framework for Accuracy, Transparency and Operational Intelligence in Energy Retail

Home / AI Energy Billing Assurance & Revenue Intelligence Overview Energy retailers today operate within one of the most intricate data ecosystems in the utilities sector. Although customers see only a single number on their electricity bill, retailers manage a complex chain of systems, data sources and operational processes behind the scenes. A defect at […]
AI Tariff Optimisation & Bill Shock Prevention

Electricity pricing has evolved dramatically. Customers now navigate rooftop solar, batteries, electric vehicles, time of use tariffs, demand charges, flexible pricing and dynamic peak periods. Two households with similar consumption can receive vastly different bills.
This article presents an AIdriven Tariff Optimisation & Bill Shock Prevention framework that forecasts customer behaviour, simulates tariff outcomes, identifies billshock risk and recommends optimal tariffs based on cost, stability, DER compatibility and customer preferences.
When Critical Infrastructure Becomes the Target: The New Cybersecurity Battle for Utilities

I have spent 25 years across banking, financial services, government, and telecommunications, including time inside a Tier-1 national Security Operations Centre. This is the incident I return to most often when I want to explain why the cybersecurity conversation in every board room I sit in has irreversibly changed. It is not a story about a sophisticated adversary defeating sophisticated defences. It is a story about an ordinary attacker exploiting an ordinary weakness and, through the plumbing of a modern enterprise, causing a national economic event.
A Practical Framework for Responsible AI Adoption in Complex Organisations

Home / Overview Across every enterprise I have advised over the past eighteen months, the same three questions about AI surface in the same order. First comes curiosity: “Can we use AI for this?” Then comes judgement: “Should we use AI for this?” And finally, quietly, comes the question that determines organisational risk posture: “If […]